$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/af2c573a-f8ef-330d-9d39-a46c409fb85a.roa File: af2c573a-f8ef-330d-9d39-a46c409fb85a.roa (raw, json) Hash identifier: cjv7NJbwYw3wMPwET07V0s7rt8Iyv9exQPsS0jggAPA= Subject key identifier: 35:CA:9C:14:B8:1E:72:6F:75:88:DF:89:34:E4:FE:84:2D:AF:A4:EF Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A507973723EE46AC03FFB8C40 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/af2c573a-f8ef-330d-9d39-a46c409fb85a.roa Signing time: Thu 26 Jun 2025 01:30:08 +0000 ROA not before: Thu 26 Jun 2025 01:30:08 +0000 ROA not after: Wed 24 Sep 2025 01:30:08 +0000 asID: 200999 IP address blocks: 2001:470:479::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:50:79:73:72:3e:e4:6a:c0:3f:fb:8c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 26 01:30:08 2025 GMT Not After : Sep 24 01:30:08 2025 GMT Subject: CN=233ee82b-1930-4632-be54-91012f37a26b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5c:77:b3:8a:28:de:83:95:b6:1e:cf:44:e0: 3d:ff:a8:80:9c:ed:96:b0:22:7a:5f:cf:e9:0e:1e: f7:34:cd:2b:6f:59:82:94:fe:bb:47:2b:81:37:57: 84:7d:f1:58:38:ec:46:60:e9:b7:78:27:ff:9d:d2: 23:3e:5d:7b:34:8c:4d:5e:34:d9:6e:1f:a8:ec:13: b5:bf:61:8e:51:f2:5c:83:42:d5:6b:f6:ed:ff:46: e3:b2:6f:9f:fe:f5:22:70:7b:00:77:76:b0:64:47: 0d:70:11:91:f0:55:f6:2e:c8:39:33:02:32:dd:7c: 8a:ed:c2:3d:03:99:7a:31:42:79:38:9d:7d:3f:86: 70:59:37:82:05:de:67:a3:5a:f3:92:36:81:7e:a3: 0e:d2:32:92:95:38:95:4d:ca:d0:d3:75:88:1b:31: 07:56:72:23:47:7f:47:c8:16:04:64:5a:53:f8:92: d8:16:84:26:7d:11:4b:33:55:46:53:66:77:64:df: 20:5d:15:df:da:e5:de:61:a6:14:d9:a9:fe:71:2c: 6a:05:9b:7f:64:67:f6:71:c9:1c:21:33:e1:b4:2e: e5:39:8a:e3:4d:a9:23:f7:61:b7:dd:6b:7c:55:87: f9:2e:8d:21:63:44:fc:99:d7:e2:f1:59:24:e5:bb: b5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:CA:9C:14:B8:1E:72:6F:75:88:DF:89:34:E4:FE:84:2D:AF:A4:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/af2c573a-f8ef-330d-9d39-a46c409fb85a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:479::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:3d:f6:7c:fe:77:d4:2a:ea:f0:c5:04:06:26:91:9a:20:5d: 3b:d3:7e:c2:25:6b:c9:bc:0f:d1:0a:51:27:e1:62:47:4e:71: 87:3b:1d:73:37:72:0f:09:04:96:77:33:a6:83:e7:6e:70:06: 9b:bb:8f:96:3c:00:8d:96:be:3b:7f:b3:63:74:69:ef:95:fe: d1:a9:10:9c:b5:c8:d0:ba:2d:77:da:b5:ef:50:2e:ba:91:07: bd:f2:15:1c:7a:2a:2d:2b:8b:f1:28:12:9a:87:7b:59:26:1e: d1:d4:d0:e0:d7:23:70:17:bd:46:51:cc:67:41:6e:31:c4:88: ad:c2:3e:58:4d:af:08:ce:5c:fa:00:6f:c0:ab:70:17:82:be: 44:74:f0:0c:e7:9f:3c:fd:71:38:aa:ff:98:9b:bb:a9:7f:31: 01:64:3b:22:0a:16:fe:74:8d:f3:31:20:6d:8a:af:74:1c:da: 5c:24:49:4c:58:c0:8b:dc:00:50:0e:12:f4:c7:d0:80:65:96: c1:a8:9c:bf:dd:04:35:eb:7d:32:19:fe:44:94:4f:dd:23:81: c3:ed:d6:20:4a:74:5a:e3:b0:8b:75:0d:de:a5:31:42:69:95: 94:76:47:67:f0:08:64:0d:6b:48:4e:eb:ca:e9:f0:9c:35:ba: 76:29:8e:99 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpQeXNyPuRqwD/7jEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDYyNjAxMzAwOFoXDTI1MDkyNDAxMzAwOFowLzEtMCsGA1UEAxMk MjMzZWU4MmItMTkzMC00NjMyLWJlNTQtOTEwMTJmMzdhMjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Vx3s4oo3oOVth7PROA9/6iAnO2WsCJ6X8/p Dh73NM0rb1mClP67RyuBN1eEffFYOOxGYOm3eCf/ndIjPl17NIxNXjTZbh+o7BO1 v2GOUfJcg0LVa/bt/0bjsm+f/vUicHsAd3awZEcNcBGR8FX2Lsg5MwIy3XyK7cI9 A5l6MUJ5OJ19P4ZwWTeCBd5no1rzkjaBfqMO0jKSlTiVTcrQ03WIGzEHVnIjR39H yBYEZFpT+JLYFoQmfRFLM1VGU2Z3ZN8gXRXf2uXeYaYU2an+cSxqBZt/ZGf2cckc ITPhtC7lOYrjTakj92G33Wt8VYf5Lo0hY0T8mdfi8Vkk5bu1YwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDXKnBS4HnJvdYjfiTTk/oQtr6TvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYWYyYzU3M2EtZjhlZi0z MzBkLTlkMzktYTQ2YzQwOWZiODVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAR5 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHU99nz+d9Qq6vDFBAYmkZogXTvTfsIla8m8D9EKUSfhYkdOcYc7 HXM3cg8JBJZ3M6aD525wBpu7j5Y8AI2Wvjt/s2N0ae+V/tGpEJy1yNC6LXfate9Q LrqRB73yFRx6Ki0ri/EoEpqHe1kmHtHU0ODXI3AXvUZRzGdBbjHEiK3CPlhNrwjO XPoAb8CrcBeCvkR08Aznnzz9cTiq/5ibu6l/MQFkOyIKFv50jfMxIG2Kr3Qc2lwk SUxYwIvcAFAOEvTH0IBllsGonL/dBDXrfTIZ/kSUT90jgcPt1iBKdFrjsIt1Dd6l MUJplZR2R2fwCGQNa0hO68rp8Jw1unYpjpk= -----END CERTIFICATE-----Generated at Sun Jun 29 13:02:07 2025 by rpki-client